Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/ff4e1f37-1589-350c-afd5-fe19875a47b1.roa
File:                     ff4e1f37-1589-350c-afd5-fe19875a47b1.roa (raw, json)
Hash identifier:          iBIjLvvywOZUXvznIxzwaWU/cLnj2m1eJyVptXtKvnc=
Subject key identifier:   DF:41:1A:54:64:B9:A7:73:4B:76:20:B9:78:17:B6:82:30:89:61:D8
Certificate issuer:       /CN=a90f006a-b108-4757-9dfd-b36376534658
Certificate serial:       010D0C9F4328583D648F373977D107FF68A576E0
Authority key identifier: 56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/ff4e1f37-1589-350c-afd5-fe19875a47b1.roa
Signing time:             Thu 10 Jun 2021 04:00:00 +0000
ROA not before:           Thu 10 Jun 2021 04:00:00 +0000
ROA not after:            Sun 30 Jun 2024 04:00:00 +0000
asID:                     0
IP address blocks:        45.43.21.0/24 maxlen: 24
                          66.11.126.0/24 maxlen: 24
                          2605:fb80:e000::/36 maxlen: 36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:64:8f:37:39:77:d1:07:ff:68:a5:76:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a90f006a-b108-4757-9dfd-b36376534658
        Validity
            Not Before: Jun 10 04:00:00 2021 GMT
            Not After : Jun 30 04:00:00 2024 GMT
        Subject: CN=3f732e53-cf91-4c46-b7ab-f376da9adf2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:32:50:f3:1d:b0:76:f1:27:13:08:f4:43:2e:
                    7a:9e:1a:38:92:8e:bb:6a:cf:0a:1e:97:92:d3:f2:
                    7a:e8:c3:07:f5:37:fd:9b:93:fc:91:ac:b0:a2:f2:
                    9d:59:15:a5:5f:35:1b:5a:65:14:a7:3d:aa:85:d8:
                    36:d3:d4:db:a8:7b:27:52:7f:67:ae:c5:8a:f3:70:
                    eb:6d:b9:fe:02:8e:8c:a8:07:81:0d:27:40:75:91:
                    c2:4e:18:0c:cc:8c:56:12:61:c1:96:50:ce:f7:bf:
                    e4:b3:39:2c:ca:cf:cd:d9:97:47:42:8f:2e:b5:f6:
                    60:fa:d5:90:37:50:9e:7c:bf:8f:67:c6:9f:69:2b:
                    43:54:72:c7:4a:90:b8:32:8c:a9:93:57:bd:87:17:
                    da:21:fc:6c:5b:a0:00:29:e5:11:a9:1e:0a:a1:df:
                    b6:0b:7a:bb:6f:1d:f2:74:e3:1b:07:7d:d0:8e:90:
                    bc:55:d5:06:42:0f:a9:e0:59:13:c0:cf:0b:b8:32:
                    08:d9:f9:7c:fe:36:56:f7:cf:37:a6:7b:3f:61:01:
                    13:f5:a9:20:2a:af:73:a0:e6:53:de:ee:4d:fa:1f:
                    57:0f:68:3f:94:31:0b:85:82:e1:95:1d:ed:cc:f5:
                    76:1b:ac:d4:0d:f3:92:41:13:cd:be:db:4b:58:f6:
                    c1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:41:1A:54:64:B9:A7:73:4B:76:20:B9:78:17:B6:82:30:89:61:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/ff4e1f37-1589-350c-afd5-fe19875a47b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl

            X509v3 Authority Key Identifier:
                keyid:56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.43.21.0/24
                  66.11.126.0/24
                IPv6:
                  2605:fb80:e000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:13:0b:1a:24:bf:c1:ed:1b:e2:33:35:bb:fc:47:c2:59:c5:
         a9:ac:eb:46:cd:a5:97:ea:26:43:80:59:aa:cc:10:a4:8e:24:
         ab:3e:2c:15:bb:81:40:85:d4:38:64:14:46:e5:6a:db:96:86:
         ce:0c:3c:f3:39:db:c6:e5:5e:a3:cc:5e:51:e6:ad:68:7b:2c:
         58:18:20:33:e5:65:47:c2:fe:2a:26:66:5a:2c:8a:3a:05:bd:
         57:04:d8:56:3e:82:41:6d:99:fc:0f:53:de:a4:8d:e8:e7:ff:
         42:25:f2:ec:70:65:b7:af:bb:c3:0d:f4:95:9c:c3:ac:0b:a8:
         37:93:4c:f5:88:b9:54:1b:96:2f:a5:5b:95:fe:f3:36:06:84:
         97:0d:4a:5a:cc:67:e9:2c:18:bd:e2:cd:8a:1a:58:3b:8c:0d:
         2d:36:77:cd:8e:18:71:5b:16:97:93:49:f6:40:e0:ce:13:05:
         0c:b9:7e:7b:ce:ff:b8:12:f3:2b:1a:22:29:8f:c8:a3:05:a2:
         69:c1:3e:a9:ce:f0:7a:c5:d1:1d:c7:02:9d:0a:a2:ef:48:a4:
         65:74:5a:e0:a7:83:2a:08:1f:f5:b0:e1:a8:0b:6b:01:4a:5f:
         95:20:60:70:f8:dc:9c:27:92:99:4d:55:3f:3d:65:f5:14:f2:
         8a:6e:53:0d
-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWD1kjzc5d9EH/2ilduAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTkwZjAwNmEtYjEwOC00NzU3LTlkZmQtYjM2Mzc2NTM0
NjU4MB4XDTIxMDYxMDA0MDAwMFoXDTI0MDYzMDA0MDAwMFowLzEtMCsGA1UEAxMk
M2Y3MzJlNTMtY2Y5MS00YzQ2LWI3YWItZjM3NmRhOWFkZjJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDJQ8x2wdvEnEwj0Qy56nho4ko67as8KHpeS
0/J66MMH9Tf9m5P8kaywovKdWRWlXzUbWmUUpz2qhdg209TbqHsnUn9nrsWK83Dr
bbn+Ao6MqAeBDSdAdZHCThgMzIxWEmHBllDO97/kszksys/N2ZdHQo8utfZg+tWQ
N1CefL+PZ8afaStDVHLHSpC4Moypk1e9hxfaIfxsW6AAKeURqR4Kod+2C3q7bx3y
dOMbB33QjpC8VdUGQg+p4FkTwM8LuDII2fl8/jZW9883pns/YQET9akgKq9zoOZT
3u5N+h9XD2g/lDELhYLhlR3tzPV2G6zUDfOSQRPNvttLWPbBlwIDAQABo4IDazCC
A2cwHQYDVR0OBBYEFN9BGlRkuadzS3YguXgXtoIwiWHYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTBm
MDA2YS1iMTA4LTQ3NTctOWRmZC1iMzYzNzY1MzQ2NTgvZmY0ZTFmMzctMTU4OS0z
NTBjLWFmZDUtZmUxOTg3NWE0N2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTkwZjAwNmEtYjEwOC00NzU3LTlk
ZmQtYjM2Mzc2NTM0NjU4L2E5MGYwMDZhLWIxMDgtNDc1Ny05ZGZkLWIzNjM3NjUz
NDY1OC5jcmwwHwYDVR0jBBgwFoAUVrt1Gou+kg2JmSYj+7Wl+6n3GPgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTBmMDA2YS1iMTA4LTQ3NTctOWRmZC1iMzYz
NzY1MzQ2NTguY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQALSsVAwQA
Qgt+MA4EAgACMAgDBgQmBfuA4DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCREwsaJL/B7RviMzW7/EfCWcWp
rOtGzaWX6iZDgFmqzBCkjiSrPiwVu4FAhdQ4ZBRG5WrblobODDzzOdvG5V6jzF5R
5q1oeyxYGCAz5WVHwv4qJmZaLIo6Bb1XBNhWPoJBbZn8D1PepI3o5/9CJfLscGW3
r7vDDfSVnMOsC6g3k0z1iLlUG5YvpVuV/vM2BoSXDUpazGfpLBi94s2KGlg7jA0t
NnfNjhhxWxaXk0n2QODOEwUMuX57zv+4EvMrGiIpj8ijBaJpwT6pzvB6xdEdxwKd
CqLvSKRldFrgp4MqCB/1sOGoC2sBSl+VIGBw+NycJ5KZTVU/PWX1FPKKblMN
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:43 2023 by rpki-client on console-fra.rpki-client.org